Skip to content
OpenAdvisories

Package · Go

github.com/hyperledger/fabric-ca

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.3
    CVE-2026-53658

    Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

    Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentication into the LDAP uid search UserFilte…

    hyperledger fabric-ca github.com/hyperledger/fabric-ca Go